PT-2025-31497 · Code Projects · Vehicle Management
Wllovemy
·
Published
2025-07-31
·
Updated
2025-07-31
·
CVE-2025-8375
Wllovemy
·
Published
2025-07-31
·
Updated
2025-07-31
·
CVE-2025-8375
7.5
High
Base vector | Vector | AV:N/AC:L/Au:N/C:P/I:P/A:P |
Name of the Vulnerable Software and Affected Versions:
code-projects Vehicle Management version 1.0
Description:
A critical issue exists in the processing of the `/addvehicle.php` file. Manipulation of the `vehicle` argument results in a SQL injection. The attack can be initiated remotely. The exploit has been disclosed to the public and may be used.
Recommendations:
At the moment, there is no information about a newer version that contains a fix for this vulnerability.
Exploit
Special Elements Injection
SQL injection